Question

How can you stop malware from spreading across your systems?

Why do you think organizations still deploy Wi-Fi across an organization?

What steps can be taken to reduce the risks associated with Wi-Fi services?

Answer 1

`Hey,

Note: Brother if you have any queries related the answer please do comment. I would be very happy to resolve all your queries.

Disconnect from the network
If the system(s) you suspect are infected are not business-critical, you can simply disconnect them from the network. This won't necessarily prevent any local damage, but it will keep the malware contained. Even if the system(s) are business critical, it may behoove you to fix the current problem rather than leave the system on the network. This is a business decision that must be made on a per-system basis and documented in your incident response plan before an attack like this occurs (more on this below).

Power down
The safest thing to do may be to power down the system. This can clear malware, such as worms, out of memory and possibly clean things up. However, there's always a chance that powering down or rebooting could do more damage to the system. If possible, I recommend researching the attack first if you have anything to go on -- look for errors, well-defined behaviors, antivirus software warnings, suspicious log file entries, etc. Check Google, Microsoft and other vendor sites to see if someone else has had the problem and what the fix is.

Use your network analyzer
If you're not sure which system(s) are infected, the quickest and easiest way to find out what's going on from a network perspective is to fire up your network analyzer. You'll need to have access to a monitor or span port on an Ethernet switch to do this, so it's good to know where to go in advance. Once you connect your analyzer to the network, you don't necessarily have to capture all packets. Instead, if your analyzer supports it, let it run in monitor mode so it can get a higher-level view of what's going on -- protocols in use, network errors, top talkers, suspicious communications to other systems, etc. This is by far the best way to go about tracking down the problem areas.

Clean up
Once you track down the problem, it's time for clean up. Depending on the recommended fix you get from Microsoft, your antivirus vendors or other vendors, clean up will likely consist of a new cleaning tool, a signature update, deleting certain files, or editing the Windows registry.

Note: Brother According to HomeworkLib's policy we are only allowed to answer first part if there are many. So, I request you to post other part as separate posts

Kindly revert for any queries

Thanks.